Adversarial Examples Might be A voidable: The Role of Data Concentration in Adversarial Robustness
–Neural Information Processing Systems
However, these results can be too general to be applicable to natural data distributions. Indeed, humans are quite robust for tasks involving vision.
Neural Information Processing Systems
Oct-9-2025, 01:38:33 GMT